v1.2.0

What's Changed

• feat: browser-use (P14) + computer-use (CU) + native-macOS MVP (CU-MAC-T01..T04) by @RNT56 in #60
• fix: wire browse/desktop subcommands into the CLI + lint cleanup by @RNT56 in #62
• Phase 15: OpenAI / OpenRouter / generic OpenAI-compatible provider upgrade (non-web) by @RNT56 in #61
• feat(CU-MAC): host-control hardening — permission probe, kill-switch, per-app allowlist (T07/T09) by @RNT56 in #63
• docs: promote shipped roadmaps into the canonical source-of-truth (Phases 14/CU/15) by @RNT56 in #64
• feat(P15): web search — native server-side + sandboxed client fallback (T07/T08/T09) by @RNT56 in #65
• feat(chat,tui): /ask alias + principal-initiated /save + TUI control-verb parity by @RNT56 in #66
• feat(AU): ask_user — attended-only interactive clarification (Phase 1 + 2) by @RNT56 in #67
• feat(tools): 11 host-side structural tools (patch/edit_checked/rename/structural_replace/…) + git blame/show by @RNT56 in #68
• fix(session,tui): front-door follow-ups — Cancel race, restart continuity, TUI parity by @RNT56 in #69
• feat(P16): closed-loop autonomy foundation — experience layer, graduated auto-approval, blast budget, routing oracle, flywheel by @RNT56 in #71
• feat(AU-UI): native per-surface ask_user UI + AU-T05b gate unification + AU-T08 supervisor ask by @RNT56 in #70
• feat(P16 cont.): dynamic routing end-to-end + graduated-auto-approval audit by @RNT56 in #72
• feat(P16 cont.): fence graduated auto-approval (-blast-radius) + unify capability by @RNT56 in #73
• feat(P16 cont.): nilcore experience + capability read CLIs by @RNT56 in #74
• feat(P16 cont.): graduated auto-approval on every surface + swarm trust boundary (GAA-T04/T07) by @RNT56 in #75
• feat(P16): finish the closed-loop autonomy program (Pillars 1–7) by @RNT56 in #76
• feat(P16): Pillar 8 — the unified orchestration kernel (UOK) by @RNT56 in #77
• feat(P16): UOK follow-ups — kernel default-on + product-surface collapse + polish by @RNT56 in #78
• fix(browse): bounded auto-wait for actionable elements (de-flake D1 live run) by @RNT56 in #79
• feat(P16): UOK V2 — the preset router that completes the kernel (nilcore do) by @RNT56 in #80
• chore(P16): polish pass — verified doc-staleness + flake fixes (adversarial review) by @RNT56 in #81
• feat(AU-T05b): ask_user/gate unification for escalated chat drives by @RNT56 in #82
• feat(P16): Kernel V2 — the recursive decompose preset (kernel's first recursion consumer) by @RNT56 in #83
• chore(P16): polish pass over #82 + #83 (verified review fixes) by @RNT56 in #84
• docs(readme): upgrade for the unified kernel, nilcore do, decompose + closed-loop by @RNT56 in #85
• Audit remediation: security/bug fixes + wire built-but-dead subsystems by @RNT56 in #86
• fix(ci): repair sandbox-linux + tui-verify lanes #86 turned red by @RNT56 in #87
• Resolve the five deferred-activation seams (clean · wire · plan · deprecate · fledge) by @RNT56 in #88
• fix(ci): gofmt internal/mcp/codegen.go (un-break main) by @RNT56 in #89
• Full-repo cleanup: robustness, completeness, dead-code, doc-drift, tests by @RNT56 in #90
• feat(mcp): close the container gap + HTTP/SSE transport + opt-in resources/prompts by @RNT56 in #91
• Deep subsystem audit: remediate all 89 shipped-gaps (14 areas) + selfeval wiring by @RNT56 in #92
• Repo-wide arch/robustness/completeness pass: 26 verified fixes (2 HIGH mcp bugs) by @RNT56 in #93
• fix(flows): route flows run through the DAG-honoring swarm code preset by @RNT56 in #94
• Upgrade program: 17 judge-ranked improvements + 26 adversarial-review fixes (5 HIGH) by @RNT56 in #95
• Audit remediation: fix all e2e-audit findings + 8 review-caught regressions by @RNT56 in #96
• docs(readme): refresh stale facts to match the current codebase by @RNT56 in #97
• Resolve all defect-hunt findings: wire dead features, fix bugs, prune dead code by @RNT56 in #98
• chore: add Apache 2.0 license by @RNT56 in #99
• Features-completeness review: fix 11 HIGH shipped-but-inert defects, then reconcile all docs by @RNT56 in #101
• fix: remediate 2026-07-10 adversarial audit (1 CRITICAL + ~11 HIGH + ~12 MED) + adversarial re-verification by @RNT56 in #100
• fix: harden toolchain and release integrity by @RNT56 in #103
• refactor: centralize native front-door runtime by @RNT56 in #104
• test: add provider compatibility evals by @RNT56 in #105
• docs: mark Phase 15 complete by @RNT56 in #106
• fix: stamp release binary versions by @RNT56 in #107
• docs: prepare v1.2.0 release by @RNT56 in #108
• chore: move workflows to Node 24 actions by @RNT56 in #109

Full Changelog: v1.1.0...v1.2.0

v1.1.0

What's Changed

• Phase 13: Trust Ledger + "why did it do that" trace explorer by @RNT56 in #55
• Phase 13 (languages): code intelligence now reads 19 languages by @RNT56 in #56
• Phase 13: multi-backend strength-routing (the Trust Ledger goes live) by @RNT56 in #57
• Phase 13: model-driven work-routing + earned backend selection by @RNT56 in #58
• release: v1.1.0 — Phase 13 (model-driven routing, earned backend selection, 19 languages, trust/trace) by @RNT56 in #59

Full Changelog: v1.0.1...v1.1.0

v1.0.1 — audit remediation

A post-1.0.0 patch from a full adversarial audit of the merged P11 (verifier-backed artifact factory) + P12 (verified swarm) surface (28.6k lines: 8-reviewer review → independent verify → synthesis).

The audit confirmed the architecture and all seven invariants (I1–I7) are sound, and fixed 20 real defects:

• 🔴 Blocker — code-pack flag injection: a worker Evidence.Value of -run=^$ ran go test -run=^$, selected zero tests, exited 0, and laundered a green verdict past the verifier (I2 erosion). Fixed with a leading-dash reject + a -- positional separator. 1.0.0 shipped with this (the audit ran post-release).
• 🟠 8 major — finance keyed checks could never pass (single-quoted $VAR), swarm false-RED on repeat runs, pool cap-sharing on inherited tiers, a dead --egress-allow flag, the absent TipSHA fold seam, and 3 masking tests rewritten to discriminate.
• 🟡 8 minor + 3 polish — termination rails, board redaction, dead-trace removal, non-recording budget probe, and more.

Every defect except the blocker failed safe (false-RED or inert). make verify + go test -race green; go.mod/go.sum unchanged; default binary still 2 core deps, CGO_ENABLED=0.

Full per-defect detail: #53. Release: #54.

v1.0.0

NilCore v1.0.0 — the agent its constitution describes

NilCore is a tiny, robust, sandboxed coding and research agent: the harness is small, the model is the engine, and trust comes from three disciplines only — the verifier, the sandbox, and the append-only audit log. v1.0.0 accumulates Phases 7–12 + the deferred items D1–D4 + the external-review fixes R1–R3 on top of the [v0.1.0] core (Phases 0–6).

What it does

• One task or a whole project — a native loop, or an agentic supervisor that spawns role-specialized subagents, integrates their parallel worktrees into one verifier-green tree, and re-plans to convergence. Plus delegated Codex / Claude Code behind one frozen contract.
• Verified swarm mode (nilcore swarm) — fan hundreds of agents into a bounded in-process pool where every unit produces a typed artifact judged by a verify-pack; only verifier-green shards ship, failed shards requeue until clean. Five presets, a tiered provider pool, a live scoreboard.
• Code is one verifiable artifact among many — reports · matrices · audits · benchmarks · dossiers, each claim re-checked in the sandbox (nilcore report renders the trust story and refuses green over a broken chain).
• Sees the running app through a sandboxed headless browser (drives a flow, then folds a behavioral check into the verdict).
• Understands four languages structurally and semantically (Go · Python · TS/JS · Rust; AST · graph · repo-map · LSP · pure-Go HNSW · impact).
• Runs unattended and reacts — metered budgets, durable crash-resume, webhook + cron triggers, gated draft PRs (the agent never merges).
• Conversational front door (nilcore chat, Telegram/Slack) with live streaming + queue/steer.

The receipts

• 7 / 7 invariants hold · 2 core deps in the default binary (pure-Go SQLite + golang.org/x/sys) · CGO_ENABLED=0 · the Charm TUI links only under make tui.
• make verify green · golangci-lint 0 issues · ~46.5k lines of agent (~89.3k incl. tests, 206 test files) · 84 packages.
• Cross-compiled binaries attached for darwin/linux × amd64/arm64.

What's next

The only remaining roadmap is the gated external-infrastructure tier (EXT-01..08) — deliberately not eligible work, fully blueprinted in docs/EXT-EXECUTION-PLANS.md but blocked behind a recorded human thesis decision. Phase-13+ candidates are scanned in docs/HORIZON.md.

Full changelog: CHANGELOG.md.

v0.1.0

Full Changelog: https://github.com/RNT56/NilCore/commits/v0.1.0